From 4be10b177b706d606c3ccdc8e55cf7ee5d992200 Mon Sep 17 00:00:00 2001 From: Mrxn Date: Sat, 22 Feb 2020 12:14:44 +0800 Subject: [PATCH] =?UTF-8?q?add=20CVE-2020-8813-Cacti=20v1.2.8=20RCE?= =?UTF-8?q?=E8=BF=9C=E7=A8=8B=E4=BB=A3=E7=A0=81=E6=89=A7=E8=A1=8C=20EXP?= =?UTF-8?q?=E4=BB=A5=E5=8F=8A=E5=88=86=E6=9E=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index ed57759..4c0e550 100644 --- a/README.md +++ b/README.md @@ -121,6 +121,7 @@ - [YzmCMS 5.4 后台getshell](https://xz.aliyun.com/t/7231) - [CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc](https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC)|[Java版本POC](https://github.com/0nise/CVE-2020-1938)|[Tomcat-Ajp协议文件读取漏洞](https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/) - [CVE-2020-8840:Jackson-databind远程命令执行漏洞(或影响fastjson)](https://github.com/jas502n/CVE-2020-8840) +- [CVE-2020-8813-Cacti v1.2.8 RCE远程代码执行 EXP以及分析(需要认证/或开启访客即可不需要登录)(一款Linux是基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具)](https://shells.systems/cacti-v1-2-8-authenticated-remote-code-execution-cve-2020-8813/) ## 提权辅助相关